$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft File: LcO_WKfD4suVkd5E2HmTwNP3MnM.mft (raw, json) Hash identifier: 7WeuNeARDRKfRbp/vzXtdG3SITv6Mjgy1rOziWnWBhI= Subject key identifier: 36:74:07:F6:67:E8:B7:FA:6A:B4:E4:16:F4:85:B0:12:C3:A3:1C:C4 Authority key identifier: 2D:C3:BF:58:A7:C3:E2:CB:95:91:DE:44:D8:79:93:C0:D3:F7:32:73 Certificate issuer: /CN=2DC3BF58A7C3E2CB9591DE44D87993C0D3F73273 Certificate serial: 09D0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft Manifest number: 09D0 Signing time: Wed 05 Nov 2025 15:12:50 +0000 Manifest this update: Wed 05 Nov 2025 15:12:50 +0000 Manifest next update: Wed 05 Nov 2025 21:12:50 +0000 Files and hashes: 1: LcO_WKfD4suVkd5E2HmTwNP3MnM.crl (hash: 1GdeZ8ciDC0ysN72jiYeM2M/7TRuitn35OPJLY2RS74=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2512 (0x9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DC3BF58A7C3E2CB9591DE44D87993C0D3F73273 Validity Not Before: Nov 5 15:12:50 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=367407F667E8B7FA6AB4E416F485B012C3A31CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:b9:90:a7:b9:1c:e8:12:8a:e5:8c:fb:aa: 6e:31:ee:eb:e5:b8:70:28:bd:51:a0:e3:9f:2a:d0: 77:8d:76:61:8b:9f:17:31:84:33:50:66:8a:09:bf: fa:99:0d:10:db:88:7e:b5:43:0c:12:1f:a7:fb:49: 3d:3f:c9:c4:0b:d4:a8:68:3f:82:bb:59:5a:b0:47: 27:a5:35:11:a1:ce:9a:12:83:1c:5c:81:e7:e8:70: d0:7a:ce:72:da:f7:6a:54:19:7c:d8:3c:c6:d5:21: fd:9d:fe:7e:b1:2a:ff:b3:ba:e7:e4:9d:5a:64:98: cb:25:63:14:3f:58:b6:f1:bf:80:c0:17:5d:98:c6: 3d:4e:f5:83:4e:be:e0:a7:74:13:93:92:9d:8d:0f: 2c:a0:b1:cb:c9:3d:55:83:4b:93:28:17:68:0b:19: b6:73:45:2d:61:38:c0:0a:e2:20:7f:57:ab:66:b8: 30:62:e6:dc:bd:28:4e:19:81:fb:31:92:b4:d5:46: 3a:56:52:c7:8c:ee:55:1c:b9:53:22:5e:23:da:23: 43:d1:4e:d5:9b:42:ab:50:2a:dc:bc:bf:5e:9a:36: 47:dc:38:18:a2:52:e4:b8:9a:20:cf:aa:af:a2:05: 4d:01:7b:f0:9d:72:5b:ff:b4:8c:08:33:ed:ee:6b: 36:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:74:07:F6:67:E8:B7:FA:6A:B4:E4:16:F4:85:B0:12:C3:A3:1C:C4 X509v3 Authority Key Identifier: keyid:2D:C3:BF:58:A7:C3:E2:CB:95:91:DE:44:D8:79:93:C0:D3:F7:32:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:05:75:29:78:6b:0c:0e:0d:27:52:a0:44:3b:31:7c:1d:ee: b8:23:9c:98:eb:13:48:33:26:85:37:72:ca:d0:1d:8b:99:91: 7e:f2:69:36:36:67:2c:f8:4d:00:45:65:05:2f:68:22:47:01: 79:9e:46:90:ed:62:3f:bc:70:46:16:77:bb:0e:19:49:dd:a6: c0:89:7e:47:c5:aa:e8:e5:74:19:12:29:49:66:a2:81:4a:3d: bc:0d:76:37:39:bf:36:8f:5c:6b:2a:e9:91:d1:f1:f2:c1:b0: 94:f6:df:b8:96:ea:eb:e3:a0:89:5d:40:81:96:ea:27:ce:13: 75:b0:5e:5c:8e:a9:2d:07:77:0d:4b:f5:38:51:01:a6:d5:b2: 6f:38:4f:9c:86:fa:6d:5e:26:8c:82:18:76:3a:73:46:8b:7e: ce:1f:eb:43:ac:d3:72:4c:24:f5:b2:58:a3:74:6c:13:a1:46: 7f:be:de:8c:2c:67:9f:2e:7c:68:04:48:d3:ea:37:ef:5b:f1: d3:0a:cd:7b:dc:e4:e9:cf:65:eb:94:35:a3:f3:22:33:96:b2: b9:3c:46:da:74:8b:2b:88:c7:b6:d8:66:f2:43:62:6b:3d:57: 4b:f7:d7:da:6b:78:e5:73:f0:40:39:da:be:11:52:15:3b:c1: 9a:c5:89:aa -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRD M0JGNThBN0MzRTJDQjk1OTFERTQ0RDg3OTkzQzBEM0Y3MzI3MzAeFw0yNTExMDUx NTEyNTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDM2NzQwN0Y2NjdFOEI3 RkE2QUI0RTQxNkY0ODVCMDEyQzNBMzFDQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpQ7mQp7kc6BKK5Yz7qm4x7uvluHAovVGg458q0HeNdmGLnxcx hDNQZooJv/qZDRDbiH61QwwSH6f7ST0/ycQL1KhoP4K7WVqwRyelNRGhzpoSgxxc gefocNB6znLa92pUGXzYPMbVIf2d/n6xKv+zuufknVpkmMslYxQ/WLbxv4DAF12Y xj1O9YNOvuCndBOTkp2NDyygscvJPVWDS5MoF2gLGbZzRS1hOMAK4iB/V6tmuDBi 5ty9KE4ZgfsxkrTVRjpWUseM7lUcuVMiXiPaI0PRTtWbQqtQKty8v16aNkfcOBii UuS4miDPqq+iBU0Be/Cdclv/tIwIM+3uazaPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUNnQH9mfot/pqtOQW9IWwEsOjHMQwHwYDVR0jBBgwFoAULcO/WKfD4suVkd5E 2HmTwNP3MnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Mi9MY09fV0tmRDRzdVZrZDVFMkhtVHdOUDNNbk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xjT19XS2ZENHN1VmtkNUUySG1Ud05QM01uTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTIvTGNPX1dLZkQ0c3VW a2Q1RTJIbVR3TlAzTW5NLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABQFdSl4awwODSdSoEQ7MXwd7rgjnJjrE0gzJoU3csrQHYuZkX7yaTY2Zyz4 TQBFZQUvaCJHAXmeRpDtYj+8cEYWd7sOGUndpsCJfkfFqujldBkSKUlmooFKPbwN djc5vzaPXGsq6ZHR8fLBsJT237iW6uvjoIldQIGW6ifOE3WwXlyOqS0Hdw1L9ThR AabVsm84T5yG+m1eJoyCGHY6c0aLfs4f60Os03JMJPWyWKN0bBOhRn++3owsZ58u fGgESNPqN+9b8dMKzXvc5OnPZeuUNaPzIjOWsrk8Rtp0iyuIx7bYZvJDYms9V0v3 19preOVz8EA52r4RUhU7wZrFiao= -----END CERTIFICATE-----Generated at Wed Nov 5 20:51:52 2025 by rpki-client